Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9182FBC/A335B258FCE411E890FC1E37C4F9AE02/mLI8urGE2rGtANEAC4IMmyGkM-w.mft
File:                     mLI8urGE2rGtANEAC4IMmyGkM-w.mft (raw, json)
Hash identifier:          ClJXn1Imjxcb7vcbN7zBwY5p9w/m5pUh2glNFj8MuSs=
Subject key identifier:   95:D2:CA:68:10:44:B2:8A:43:B3:8C:51:22:78:C9:48:FA:95:12:4D
Authority key identifier: 98:B2:3C:BA:B1:84:DA:B1:AD:00:D1:00:0B:82:0C:9B:21:A4:33:EC
Certificate issuer:       /CN=A9182FBC/serialNumber=98B23CBAB184DAB1AD00D1000B820C9B21A433EC
Certificate serial:       11D1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mLI8urGE2rGtANEAC4IMmyGkM-w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9182FBC/A335B258FCE411E890FC1E37C4F9AE02/mLI8urGE2rGtANEAC4IMmyGkM-w.mft
Manifest number:          11B2
Signing time:             Sun 20 Jul 2025 17:13:42 +0000
Manifest this update:     Sun 20 Jul 2025 17:13:41 +0000
Manifest next update:     Sun 27 Jul 2025 17:13:41 +0000
Files and hashes:         1: mLI8urGE2rGtANEAC4IMmyGkM-w.crl (hash: O4VDrRTo0pFSTqO9snluBsC70gO4e5D2lu4os/TTQNE=)
                          2: 38F5C602B18711EC9F9FA058C4F9AE02.roa (hash: 864v72yIGP6+fcV9ihOEtR0vSNI9KCZAgVkE2lkVzYA=)
                          3: 37BC67B4B18711EC9F9FA058C4F9AE02.roa (hash: au9xZxCZeREaDcJouTlLj1rRcc2mSPei8Jd1icPw/ew=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9182FBC/A335B258FCE411E890FC1E37C4F9AE02/mLI8urGE2rGtANEAC4IMmyGkM-w.crl
                          rsync://rpki.apnic.net/member_repository/A9182FBC/A335B258FCE411E890FC1E37C4F9AE02/mLI8urGE2rGtANEAC4IMmyGkM-w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mLI8urGE2rGtANEAC4IMmyGkM-w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Jul 2025 17:13:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4561 (0x11d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9182FBC, serialNumber=98B23CBAB184DAB1AD00D1000B820C9B21A433EC
        Validity
            Not Before: Jul 20 17:13:41 2025 GMT
            Not After : Jul 27 17:13:41 2025 GMT
        Subject: CN=687d23c6-7cb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:c6:e9:f0:d3:d3:4b:11:90:2b:c7:67:10:d8:
                    e7:48:52:76:99:95:2e:99:1e:58:8f:28:c4:b7:20:
                    98:45:2f:54:b4:db:e7:74:41:41:15:66:b5:9c:b0:
                    f2:b0:90:9f:80:fd:89:72:56:6b:49:b6:b8:40:e5:
                    fb:4d:99:6d:67:55:19:b4:4d:b4:b0:6c:bd:05:ff:
                    5d:b6:58:7f:5f:69:52:f9:d2:f3:92:34:b5:83:82:
                    01:8c:16:fe:a0:b4:3c:36:1b:98:5f:94:3c:3f:4d:
                    a8:71:bb:52:ac:14:bb:40:77:75:e1:3b:9b:b7:d3:
                    7b:f7:54:94:ca:10:82:61:ad:3b:7e:b8:3e:e7:b0:
                    8b:43:06:a5:f8:ad:ad:6c:45:2f:29:3e:5b:65:29:
                    92:60:01:b3:c8:db:21:85:d1:97:cf:75:bf:58:cd:
                    ef:bf:9f:de:1d:20:64:47:45:a6:4e:a2:0c:86:b4:
                    c2:48:cd:94:2d:29:94:c1:bd:93:31:91:db:e2:34:
                    e9:7d:f2:23:e8:38:a0:c4:7c:20:26:10:1d:ee:96:
                    d5:e5:5b:43:1d:a8:f1:18:cb:92:f7:e6:4c:4d:4a:
                    26:71:13:51:35:10:fd:dd:bf:aa:08:a1:df:23:7b:
                    79:e1:23:3a:85:30:27:e8:15:26:64:da:f1:7f:2d:
                    9c:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:D2:CA:68:10:44:B2:8A:43:B3:8C:51:22:78:C9:48:FA:95:12:4D
            X509v3 Authority Key Identifier:
                keyid:98:B2:3C:BA:B1:84:DA:B1:AD:00:D1:00:0B:82:0C:9B:21:A4:33:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9182FBC/A335B258FCE411E890FC1E37C4F9AE02/mLI8urGE2rGtANEAC4IMmyGkM-w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mLI8urGE2rGtANEAC4IMmyGkM-w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182FBC/A335B258FCE411E890FC1E37C4F9AE02/mLI8urGE2rGtANEAC4IMmyGkM-w.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:a1:4d:84:88:4f:7a:f1:8b:00:76:10:89:f5:4a:8a:32:17:
         12:e6:f0:78:cd:7f:75:91:0c:7c:86:bc:8f:08:43:04:0c:ed:
         06:03:2a:55:f0:eb:20:84:fa:e6:81:59:e8:d5:ed:59:04:98:
         dc:75:41:4c:06:41:4d:9e:5a:ae:3a:f7:c3:51:b5:8e:38:a7:
         24:eb:66:c2:36:88:eb:a2:69:83:c2:ee:24:a0:0f:bc:d2:81:
         a9:c4:d6:d8:e9:4f:63:2c:18:75:bc:0c:55:31:0b:aa:7f:da:
         54:3c:e6:36:86:09:76:e3:2b:48:dc:a3:06:fd:8c:e7:61:65:
         70:b1:0b:3e:d9:d3:77:85:cb:87:5e:8b:c7:4e:50:40:73:1a:
         18:04:bd:d3:c3:c5:c2:c0:22:aa:ec:47:08:12:e8:07:4f:2f:
         10:15:d3:5b:c7:88:20:74:d1:16:58:7a:0e:0d:5b:f6:d8:58:
         c6:ab:a0:36:3c:1e:9f:4d:42:4c:fc:65:62:75:67:59:d5:5d:
         5c:2b:24:fb:c6:6b:f3:70:c2:73:f5:e0:34:87:b9:f0:45:6a:
         7c:de:45:ae:cf:0e:91:8a:12:cd:12:d9:bf:a1:8c:20:3c:79:
         46:31:a5:5d:ab:3a:9a:f3:33:49:89:8e:29:60:3c:2b:c7:ba:
         10:3d:2f:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 01:19:18 2025 by rpki-client